A few months ago, the United States Sentencing Commission unanimously passed amendments to Chapter 8 of the Federal Sentencing Guidelines regarding sentencing of organizations.[1] Those amendments include conditions that a company's compliance and ethics program must meet in order to be deemed "effective" in all circumstances. Having an effective program positions a company to receive appropriate mitigation credit in the event it is found to have committed a criminal violation. The new amendments were submitted to Congress on April 29, 2010, and without action by Congress, the changes will become effective on November 1, 2010. Prior to this effective date, companies may want to consider whether and how to modify their compliance programs to comport with the new standards.
The Sentencing Guidelines provide that an organization convicted of a crime may receive a reduced sentence if it had an effective compliance and ethics program in place at the time of the offense. Under the current guidelines, there is a per se disqualification from having an effective program if "high-level personnel"[2] participated in, condoned, or were willfully ignorant of the offense. The amended guidelines eliminate this automatic disqualification if four conditions are met:
The individual with "operational responsibility" for the compliance and ethics program has "direct reporting obligations" to the board of directors or appropriate committee of the board. The program detected the offense before its discovery outside the organization or before such discovery was reasonably likely. The organization promptly reported the offense to the proper governmental authorities. No person with operational responsibility for the compliance and ethics program participated in, condoned, or was willfully ignorant of the offense.[3]
The first condition, requiring direct access to the board of directors, introduces a significant change. Direct access to the board provides a check against wrongdoing by senior management and encourages compliance officers to act in the company's best interests. A person is considered to have direct reporting obligations if the individual has "express authority" to communicate personally to the board or committee (i) promptly on criminal/potentially criminal conduct and (ii) no less than annually on the implementation and effectiveness of the compliance and ethics program.[4]
In order to meet the express authority requirement, companies should formalize in writing the reporting line to the board or committee. Doing so will afford them the possibility of qualifying for a reduced sentence in the event that high-level personnel are involved. Indeed, it is believed that several companies every year are disqualified from receiving mitigation credit for this reason.
A potential downside of granting compliance officers direct access is that it may eliminate the beneficial role played by senior management in filtering the substance and amount of information provided to the board. Companies who restructure the reporting lines should therefore consider providing guidance concerning the type of conduct that warrants reporting and when the board or committee should be informed. They should also provide guidance concerning the substance of the information that should be provided to the board by the compliance officer.
Ultimately, a change in a company's compliance structure may be justified in order to preserve the opportunity for a reduction in culpability when high-level personnel are involved. The board should be briefed on the effects of the upcoming changes, and companies will need to determine whether management or the board should decide whether to modify their compliance and ethics programs. Whether or not companies modify their programs, the new amendments highlight the importance of a company's compliance program in its overall risk management structure.[5]
Further, the third condition requiring prompt reporting may put pressure on companies to self-report before they fully understand the issues they are facing.
Of course, having an effective compliance program is also viewed favorably by prosecutors in determining whether to prosecute at all, agree to a nonprosecution or deferred prosecution agreement, or mitigate a fine. It also enhances a company's efforts to avoid civil liability in private litigation and enforcement contexts.
